A vulnerability has been found in code-projects Simple Flight Ticket Booking System 1.0. This affects an unknown part of the file checkUser.php of the component POST Parameter Handler. The manipulation of the argument Username leads to sql injection. The attack is possible to be...
Product
code-projects simple flight ticket booking system vulnerabilities
10 published CVES affecting code-projects simple flight ticket booking system, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 10
- Critical
- 0
- High
- 0
- Medium
- 10
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest code-projects simple flight ticket booking system CVEs
Newest publication first
-
MediumCVSS 6.9 EPSS 0.27%
-
CVE-2026-3763 code-projects Simple Flight Ticket Booking System showhistory.php cross site scripting
PublishedMediumCVSS 5.3 EPSS 0.36%A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. The affected element is an unknown function of the file showhistory.php. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made p...
-
MediumCVSS 6.9 EPSS 0.39%
A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. Affected by this issue is some unknown functionality of the file SearchResultRoundtrip.php. Performing a manipulation of the argument from results in sql injection. The attack may be initiated rem...
-
CVE-2026-3735 code-projects Simple Flight Ticket Booking System SearchResultOneway.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.39%A vulnerability has been found in code-projects Simple Flight Ticket Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file SearchResultOneway.php. Such manipulation of the argument from leads to sql injection. The attack can be launched remote...
-
CVE-2026-3723 code-projects Simple Flight Ticket Booking System Admindelete.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.42%A security flaw has been discovered in code-projects Simple Flight Ticket Booking System 1.0. This affects an unknown function of the file /Admindelete.php. The manipulation of the argument flightno results in sql injection. The attack may be performed from remote. The exploit ha...
-
CVE-2026-3711 code-projects Simple Flight Ticket Booking System Adminupdate.php sql injection
PublishedMediumCVSS 5.1 EPSS 0.31%A vulnerability was detected in code-projects Simple Flight Ticket Booking System 1.0. Affected is an unknown function of the file /Adminupdate.php. The manipulation of the argument flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp results in sql injection. The attack...
-
CVE-2026-3710 code-projects Simple Flight Ticket Booking System Adminadd.php sql injection
PublishedMediumCVSS 5.1 EPSS 0.31%A security vulnerability has been detected in code-projects Simple Flight Ticket Booking System 1.0. This impacts an unknown function of the file /Adminadd.php. The manipulation of the argument flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp leads to sql injection....
-
CVE-2026-3709 code-projects Simple Flight Ticket Booking System register.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.41%A weakness has been identified in code-projects Simple Flight Ticket Booking System 1.0. This affects an unknown function of the file /register.php. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has b...
-
MediumCVSS 6.9 EPSS 0.42%
A security flaw has been discovered in code-projects Simple Flight Ticket Booking System 1.0. The impacted element is an unknown function of the file /login.php. Performing a manipulation of the argument Username results in sql injection. The attack may be initiated remotely. The...
-
CVE-2026-3705 code-projects Simple Flight Ticket Booking System Adminsearch.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.41%A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. This issue affects some unknown processing of the file /Adminsearch.php. The manipulation of the argument flightno results in sql injection. It is possible to launch the attack remotely. The explo...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.